Senior IT Risk Auditor — ERP & Cloud Controls

EY; Málaga; On-site; EUR 48,000 - 70,000; Full time

Benefits offered by this job

Hybrid work model

Well-being resources

Volunteer opportunities

Career development programs

Job summary

EY GDS Spain in Malaga seeks a Senior IT Auditor to support technology risk assessments across ERP and cloud environments. You will help define audit procedures, perform IT testing, and collaborate with global teams to deliver high-quality risk assurance services.

The role emphasizes strong communication, integrity, and the ability to work in international teams, including exposure to SAP/Oracle/MS-Dynamics audits and GDPR/compliance areas.

Qualifications

• Bachelor’s degree in Computer Science or related field.
• Strong organizational and analytical skills.
• Proficient MS Office (Excel, PowerPoint, Word, Outlook).
• Experience with ETL data and Database work.
• Data analytics knowledge.
• Fluent in English; French at least B2.

Responsibilities

• Assist IT application security assessments (IT Application Controls, IT General Controls, Segregation of duties analysis).
• Define and perform IT audit procedures to assess the operative level of the controls environment.
• Perform IT testing for ERP SAP, Oracle or MS-Dynamics, Cloud Security, Database Security Audits, GDPR, ISAE3402, ISO2700 and others.
• Establish, maintain and strengthen internal and external relationships.
• Identify potential business opportunities and risks and report to senior team members.
• Deliver high quality work in line with EY GDS standards.

Skills

IT Audit

Risk management

Analytical skills

Communication skills

English fluent

French B2

Education

Bachelor’s degree in Computer Science / related field

Tools

SAP

Oracle

MS-Dynamics

Cloud Security

Database Security

GDPR

ISAE3402

ISO27001

Job description

EY GDS Spain in Malaga seeks a Senior IT Auditor to support technology risk assessments across ERP and cloud environments. You will help define audit procedures, perform IT testing, and collaborate with global teams to deliver high-quality risk assurance services.

The role emphasizes strong communication, integrity, and the ability to work in international teams, including exposure to SAP/Oracle/MS-Dynamics audits and GDPR/compliance areas.